Identiy and Access Management Engineer

Easterseals Southern California transforms lives every day. For over a century, Easterseals has championed inclusion and independence—delivering essential services like early childhood programs, autism services, employment and independent living support to more than 29,000 people each year. Through advocacy and education, we break barriers and create opportunities for the one-in-four Americans with disabilities.

The Identity & Access Management (IAM) Engineer is the senior technical owner of identity services in a regulated healthcare environment, responsible for designing, implementing, and operating secure access controls for systems handling Protected Health Information (PHI). The role leads identity lifecycle management, authentication and authorization, application integration, privileged access management, and identity governance across Active Directory, Okta, and Microsoft Entra  independently, the IAM Engineer defines identity standards, access control models, and integration patterns;

reduces privileged access risk through PAM and just-in-time access; and serves as the senior escalation point for authentication and federation issues. The role partners with IT Security leadership to ensure identity controls align with HIPAA, HITRUST, and internal security requirements. In all responsibilities, the position demonstrates a strong commitment to ESSC’s mission and values by supporting a safe, compliant, and responsive workplace injury management process.

Hiring Salary Range: $101k - $126k / yr.

The Identity & Access Management (IAM) Engineer is the senior technical owner of identity services in a regulated healthcare environment, responsible for designing, implementing, and operating secure access controls for systems handling Protected Health Information (PHI). The role leads identity lifecycle management, authentication and authorization, application integration, privileged access management, and identity governance across Active Directory, Okta, and Microsoft Entra  independently, the IAM Engineer defines identity standards, access control models, and integration patterns;

reduces privileged access risk through PAM and just-in-time access; and serves as the senior escalation point for authentication and federation issues. The role partners with IT Security leadership to ensure identity controls align with HIPAA, HITRUST, and internal security requirements. In all responsibilities, the position demonstrates a strong commitment to ESSC’s mission and values by supporting a safe, compliant, and responsive workplace injury management process.

Own Okta as the primary identity platform — SSO, MFA and adaptive authentication policy, lifecycle management, and SaaS application access — and advance the organization toward passwordless, phishing-resistant authentication (Fast Pass, FIDO2/Web Authn, certificate-based authentication).

• 25% Engineer identity integrations using SAML, OIDC/OAuth 2.0, and SCIM, including claims and expression logic, attribute mapping, and non-standard vendor implementations.
• 25% Design and implement Okta lifecycle workflows automating joiner, mover, and leaver processes from Workday through Okta, Entra , Active Directory, and downstream applications.
• 25% Own the enterprise Privileged Access Management platform, including credential vaulting and rotation, session management and session recording, and secrets management.
• 25% Total 100% Follows applicable laws, regulations, policies, and procedures, and reports potential compliance or risk concerns through appropriate channels. Uses time, materials, equipment, and other resources responsibly and efficiently. Performs other duties as assigned.